☆24Jul 29, 2021Updated 5 years ago
Alternatives and similar repositories for TokenStealingDriver
Users that are interested in TokenStealingDriver are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Sep 4, 2020Updated 6 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆37Jul 27, 2021Updated 5 years ago
- VisualStudio port of https://github.com/guervild/BOFs/tree/dev/SilentLsassDump☆22Jul 6, 2023Updated 3 years ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- Hardened Proof of Concept of D/Invoke Process Injection malware☆41Jul 23, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…☆43Sep 3, 2020Updated 6 years ago
- Shellcode antivirus evasion framework☆27Jan 16, 2021Updated 5 years ago
- redteam Build platform☆18Nov 13, 2023Updated 2 years ago
- Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.☆147Dec 13, 2021Updated 4 years ago
- A shellcode function to encrypt a running process image when sleeping.☆337Sep 11, 2021Updated 5 years ago
- Unchain AMSI by patching the provider’s unmonitored memory space☆89Nov 24, 2022Updated 3 years ago
- Service Enumeration C# .NET Assembly☆57Sep 14, 2021Updated 5 years ago
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Dec 16, 2021Updated 4 years ago
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Execute Mimikatz with different technique☆51Nov 8, 2021Updated 4 years ago
- Companion PoC for the "Adventures in Dynamic Evasion" blog post☆127May 25, 2021Updated 5 years ago
- SyscallLoader☆11Sep 13, 2021Updated 5 years ago
- A collection of scripts used to support an OffSecOps pipeline.☆15Jan 31, 2021Updated 5 years ago
- Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3☆87Jun 1, 2022Updated 4 years ago
- D/Invoke port of UrbanBishop☆30Dec 13, 2020Updated 5 years ago
- A repository with my code snippets for research/education purposes.☆52Jul 28, 2023Updated 3 years ago
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- ☆100Sep 20, 2021Updated 5 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆15Jul 20, 2022Updated 4 years ago
- C# API for Nidhogg rootkit☆21Apr 25, 2024Updated 2 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆189Mar 26, 2020Updated 6 years ago
- kernel to user mode APC injector☆45Mar 19, 2022Updated 4 years ago
- C++ WinRM API via Reflective DLL☆144Sep 11, 2021Updated 5 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆115Feb 27, 2021Updated 5 years ago
- Core bypass Windows Defender and execute any binary converted to shellcode☆43Oct 12, 2021Updated 5 years ago
- Reflective DLL loading of your favorite Golang program☆172Jan 27, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- AMSI Bypass Via the Heap☆106Nov 20, 2020Updated 5 years ago
- C# Based Universal API Unhooker☆408Feb 18, 2022Updated 4 years ago
- Project to check which Nt/Zw functions your local EDR is hooking☆200Mar 21, 2021Updated 5 years ago
- This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…☆55Nov 4, 2021Updated 4 years ago
- JALSI - Just Another Lame Shellcode Injector☆30Aug 1, 2021Updated 5 years ago
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆96Mar 8, 2023Updated 3 years ago
- Cobalt Strike BOF for quser.exe implementation using Windows API☆89Mar 22, 2023Updated 3 years ago